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Abstract. Let p be a prime congruent to 1 or 3 modulo 8 so that the equation p = 
+ 2b^ is solvable in integers. In this paper, we obtain closed-form expressions for a 
and b in terms of Jacobsthal sums. This is analogous to a classical identity of Jacobsthal. 



1. Introduction 

Let p be an odd prime. Recall that a famous result of Fermat states that p is the sum of 
two integer squares, i.e., p ~ + b'^ for some integers a and b, if and only if p = 1 mod 4. 
It turns out there is a closed-form formula for the integers a and b in terms of the Legendre 

symbol (^p^- This is the classical identity of Jacobsthal. 

Theorem A (Jacobsthal). Let p be a prime congruent to 1 modulo 4, and n be a quadratic 
nonresidue modulo p. Set 



2^\p r p 



Then A, B G Z and + — p. More precisely, if, for a prime p congruent to 1 modulo 
4, we let a be an odd integer and b be an even integer such that p — a'^ + b^, then 



p-i 

E 

x=0 



= < 



±2a, ifp = 1 mod 4 and [ — ) =1, 

}n{ 

±26, if p = I mod 4 and (-1 = -1, 
0, ifp = 3 mod 4. 



In general, we shall refer to a sum of the form 
as a Jacobsthal sum. 

There are many proofs for Jacobsthal's identity. Gauss supplied an elementary proof 
using only basic properties of the Legendre symbols. (See [2, Page 91].) One can also 
utilize properties of Jacobi sums to prove Theorem lAl (See [1 Page 190].) On the other 
hand, the sums in ^ have the obvious meaning of counting points on the elliptic curves 

= — X and = x^ — nx over Fp, respectively, so it is possible to use tools from 
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arithmetic geometry to give yet another proof. In Section |2] we will briefly explain this 
approach. 

Now observe that the equation p = + b'^ = {a + bi){a — hi) can be regarded as the 
prime factorization of p in the ring of integers in the number field Q{i). Naturally, 
one may ask whether analogous identities exist in the case of other number fields. Let 
Q{\/—D) be an imaginary quadratic number field with discriminant —D. If Q{\/—D) has 
class number one, then whether a prime p splits in Q{^/—D) depends solely on the value 
of (^p) ■ That is, if (^~^^ = 1' then there are integers a and b such that p — foia, b), 
where 



fD{x,y) 



9 1 + £> , 
X + xy ^ y , if D is odd, 

2 D 2 

X + ^J/ ) if D is even 



is the principal form of discriminant —D. Then one can ask whether these integers a and b 
can be expressed as Jacobsthal sums in a uniform way. For the case £> = 3, it is relatively 
easy. Using Jacobi sums, we find the following analogue of TheoremlAl 

Theorem B (Chan-Long- Yang |i3j|). Let p be a prime satisfying p = 1 mod 6. Suppose n 
is any integer such that x^ = n mod p is not solvable. Then 



3p = A^+AB + 



where 



AJy(^l±l\ and B^f-Vy 

The main purpose of this paper is to prove an analogue of Jacobsthal's identity in the 
case D — 8. Note that (^^^ = 1 if and only if p = 1,3 mod 8. For such a prime p, there 
exist integers a and b such that p ~ + 2b^. 

Theorem 1. Let p be a prime congruent to 1 or 3 modulo 8. Let 

' x^ + 4a;2 + 2a;' 



2 ^ V V 
Moreover, 

(1) when p=\ mod 8 and n is a quadratic nonresidue modulo p, set 
(3) ^^l^fx+nx 



and 

(2) when p = 3 mod 8, set 



4 ^ V p 

x=0 ^ ^ 




10x4 - 20x^ - 16x 



(4) B = 

P 

Then A and B are integers and satisfy + 2_B'^ = p. 

One remarkable feature of the main theorem is the existence of polynomials fix) and 
g(x) in Z[a;] such that the integers A and B'vs\p = A^+2B^ can be expressed as Jacobsthal 
sums associated to f{x) and g{x), respectively, for all primes p congruent to 3 modulo 8. 
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Our approach is mainly arithmetic-geometric. The elhptic curve — x^+Ax'^+2x cor- 
responding to the Jacobsthal sum in (|2]i has complex multiplication by the order Z[\/— 2]. 
Thus, by a famous theorem of Deuring (see [7, Theorem II. 10.5]), its L-function is the 
same as the L-function of a Hecke Grossencharakter on Q(-y/— 2). It is straightforward to 
verify that the quantity A in dU has the same absolute value as the integer amp = a^+2b^. 
The two hyperelliptic curves y"^ = + nx and y'^ — x^ + 4x^ + lOx'* — 20x^ — 16x — 8 
corresponding to the Jacobsthal sums in ^ and (|4]i are both isomorphic to y'^ — x^ + x, 
although the two isomorphisms are over two different number fields. Thus, one can deduce 
information about the i-functions of the two hyperelliptic curves from that of y"^ — x^ + x. 
The details will be carried out in Section[3] 

2. Arithmetic-geometric approach to Jacobsthal' s identity 

In this section, we will present an arithmetic-geometric proof of TheoremlA] This will 
serve as an illustrating example how one can obtain information about the L-function of 
an algebraic curve over Q from that of another algebraic curve over Q, assuming that the 
two curves are isomorphic over a number field. 

For a nonzero integer n, let En denote the elliptic curve y^ = x^ — nx. Clearly, we 
have, for a prime p relatively prime to 2n, 

#£;„(Fp) =p + i + 

Therefore, the reciprocal of the p-factor of L{En 





P 

For the case n = 1, the L-function L{Ei/Q, s) is well-known. 
Lemma 1. We have 

LiE,/Q,s)= n 1 „ 2e « p-^ + pi-^- n TT^' 

p=l mod 4 P ^ p=3 mod 4 ^ 

where for p = 1 mod 4, ap and bp are positive integers with Up odd and bp even such that 
p — Up + bp, and 

" - (^) <-''''''^ 

Proof. See [7, Page 59]. (Note that in 15], the L-function L{Ei/Q, s) is described differ- 
ently, but it is easy to check that it gives the same L-function as above.) □ 

We now extract informations about L(L„/iQ. s) from the above lemma using the fact 
that El and En are isomorphic over Q{\/ti). 

Recall that for a given elliptic curve E defined over a number field K and an arbitrary 
rational prime £, one can associate to £^ a continuous representation 

PEj ■■ Ga\(K/K) ^ GL(2, Q,) 

via the Tate-module T^E of E. For detailed discussions, see 181 . In general, when C 
is a smooth irreducible curve defined over K of genus g, one can associate to C a 2g- 
dimensional representation of Gal{K / K) by considering the Tate module of the Jacobian 
of C. The L-function L{pc,i, s) of pc,e is defined by local Euler factors. Let Ok be 
the ring of integers of K. For any prime ideal p of Ok at which pc,i is unramified, the 
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arithmetic Frobenius Frobp acts on the representation space of pc,e. with characteristic 
polynomial Pp{T) of degree 2g. Then the local Euler p-factor of L{pc,e, s) is Pp{q'^^)~^ 
where q = \Ok /p\ - Moreover, the Hasse-Weil zeta function of the reduction of C modulo 
p is equal to 

(l-t)(l-gt)- 

(cf. From now on, by the L-function L{C, s) we mean the L-function L{pc,i, s) for 
any rational prime £. 

Now let us first recall a property of group representations. 

Lemma 2. Let G be a group and H be a normal subgroup of G of finite index such that 
G/ H is cyclic. Assume that pi : G — > GL(Vi) and p2 : G GL(V2) are two irreducible 
representations over an algebraically closed field of characteristic not dividing \G / H\ 
such that the restrictions of pi and p2 to H are isomorphic. Then pi ~ P2 ® xfof some 
representation X^fG of degree 1 that is lifted from a character of G/H. 

Proof See a. □ 



We now give a proof of TheoremlAl 

Proof of Theorem^ Let n be a nonsquare integer. Let Ei and En denote the elliptic 
curves = — x and — x^ — nx. They are isomorphic over (Q(-^), which is 
not Galois over Q. Note that both curves have complex multiplication by the ring of 
Gaussian integers Z[z] as sending (x, y) to (—a;, iy) is an automorphism on both curves. 
Consequently, 




when p = 3 mod 4. For any rational prime I, the Galois representations p Ei and pE„^i of 
Gal(Q/Q) are absolutely irreducible while their restrictions to Gal(Q/Q(i)) decompose 
as 

^^i.«lGal(Q/Q(»)) = ^1 ® ^1' ^^".^lGal(Q/Q(i)) = ^" ® 

where tti, 7r„ are 1 -dimensional representations of Gal(Q/Q(i)) and tti, 7f„ their complex 
conjugates respectively. Since Ei and En are isomorphic over L ^ Q{i, ■^), 

Without loss of generality we may assume that tti Iq^^^q/^-j = ""nlGa^Q/L)- Then by 
Lemma |2] tti = 7r„ ® x where x is a character Gal(Q/Q(i)) lifted from a character 
of Gal(L/Q(i)) ^ Z/4Z with kernel Gal(Q/i) as i = Q{i, ^) is the smallest field 
over which the two curves are isomorphic. When p = 1 mod 4 and p \ 2n£, ¥p{-^) 

is a quartic extension of ¥p if and only if = —1, i.e. x(Frobp) — ±i if and only 

if (^^^ = -1. By Lemma[T] Re{7ri (Frobp)} = ±a. Therefore, Re {7r„ (Frobp)} = 

RejTTi (Frobp) <g) x(Frobp)} = ±a if — 1 and Re {tt^ (Frobp)} = ±b otherwise. This 
proves the theorem. □ 
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3. Proof of THEOREM[r| 

In this section, we will prove Theorem [T| As explained in the introduction section, 
since the elliptic curve y'^ = + Ax"^ + 2x has complex multiplication by Z[v'— 2], its 
L-function is easy to write down in terms of a Hecke Grossencharakter on Q(-\/— 2). This 
is done in Section [3T| We then show that the hyperelliptic curve = x^ + Ax^ + 10a;'' — 
20a;2 — 16x — 8 is isomorphic io y"^ = x^ + x over a Kummer extension L of Q(e2'^*/*) 
and study the L-function of y"^ ~ x^ + x in Section l372l In Section |331 we will obtain the 
Hecke Grossencharakters associated to the cychc extension L/Q{e^'^^^^). Finally, we will 
give a proof of Theorem[T]in the last section. 

3.1. The elliptic curve y"^ ~ x"^ + Ax^ + 2x. 

Lemma 3. Let E : y^ ^ x^ + ix^ + 2x. The L-function L{E/Q, s) is given by 

where ap and bp are positive integers such that p — + 2bp and 

'2(_1)V2(_^) , ,/p=lmod8, 
-2 (^] , ifp = 3 mod 8. 



Proof. The elliptic curve E : y^ — x^ + 4x^ + 2x has complex multiplication by Z[^/— 2] 
and its conductor is 256. (See |7 , Page 483].) Thus, by a well-known result of Deuring, the 
L-function i(£'/Q, s) is identical with the L-function L(x, s) of a Hecke Grossencharakter 
X of the field Q(V^) of conductor (V^)^- (See Theorem II. 10.5 and Corollary II.10.5. 1 
of Q.) It is not difficult to work out this Hecke character. Namely, for each a + by/— 2 € 
Z[-\/— 2], there are unique integers k, m, n with < fc, m < 2 and < n < 4 such that 

a + bv^ = (-1)'=3™(1 + \/^)" mod (v^)^ 
Then the Hecke character x is defined by 

xia + bV^) = (-l)'=+"(a + bV^). 

(Note that since Q(^/— 2) has class number one, we can define a Hecke character elemen- 
twise.) This character can be more succinctly written as 

/ — X /-2\ , , — , ii-lW^, if 6 is even, 
xia + bV^)=i — ){a + bV^)-\\' ' 
\ a J 1—1, if IS odd, 

which yields the expression of L{E/Q, s) given in the statement of the lemma. □ 



Corollary 4. We have 

' x''^ + Ax^ + 2x\ J ±2a, //'p= 1,3 mod 8, 



E 

x=Q 



p / 0, ifp =5,7 mod 8, 



where a and b are integers such that p — a'^ + 2b^. 
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3.2. The hyperelliptic curve = .x^ + x. 

Lemma 5. The two hyperelliptic curves — x^ +x and = x^ + Ax^ + lOx^ — 20a;^ — 
16a; — 8 are isomorphic over the number field Q{9), where 9 = l?l\\f2 - l)^/*. 

Proof. Notice that the polynomial + 4a;^ + lOa;^ — 20a;^ — 16a; — 8 factorizes as 

[x^ - 2)(a;* + 4a;^ + Vlx^ + 8a; + 4). 

We make a hnear transformation sending the root \/2 to oo and the root — \/2 to 0, i.e., 
setting 

_ ^^2{xx + 1) _ yx 

XI -1 ' y-(a;i-l)3' 

we get 

y\ = 128(2 + \/2)xi(4 + 3-2V2). 



Then let a;i = y\/2 — lx2, yi — y2, and obtain 



yl = 128^2(72 - I f^^ixl + X2). 
Finally, setting X2 = X3 and 2/2 = u^^^ys, where u = 128-\/2(-\/2 — l)'^/-^, we arrive at 

yi =xl+X3. 

This proves the lenmia. □ 
Proposition 6. Let X be the hyperelliptic curve = x^ + x over Q. Then we have 

L{X/q,s) = L{Ei/Q,s)L{E2/Q,s), 

where Ei and E2 are the elliptic curves y'^ = x^ + 4a;^ + 2a; and y^ = x^ — Ax^ + 2a;, 
respectively. 

Proof. We have 

x^ +x = x{{x - if + 4a;(a; - 1)^ + 2a;^). 

Thus, letting 

_ v{x - 1) 
X x^ 
we find that X and Y satisfy Y"^ = X^ + AX"^ + 2X. In other words, there is a 2- 
to-1 morphism from X to i^i defined over Q and hence the Gal(Q/Q)-representation 
pEi/ associated to Ei is a subrepresentation of pxj associated to X. Similarly, setting 
X = (a;+l)^/xandF = y(a;+l)/a;^, we get a morphism from X to i?2 and conclude that 
PEi,i is also a Gal(Q/Q)-subrepresentation of px,i. Since pEi,t and pe2,i are nonisomor- 
phic absolutely irreducible Gal(Q/Q)-representations and dimQ^ PEi,t + dimQ^ PE2,e = 
dimQj px,e, we have 

px,e = PEi,e ® pE2,e 

and 

i(X/Q, s) = L{E,/q, s)L{E2/Q, s). 
This proves the proposition. □ 

Corollary 7. Let the curve X : y"^ = x^ + x be given as above. Let 

1 



(1 - ap,ip *) ... (1 - ap,4P ") 
fee p-factor ofL{X/Q, s). 
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(1) Ifp=l mod 8, then 



a 



each with multiplicity 2, where a and b are the positive integers such that p — 
a2 + 262. 

(2) If p = 3 mod 8, then apj — ±a ± h\J —% where a and b are integers such that 
p^a^ + 262. 

(3) If p =5,7 mod 8, then ap,j = ±i^/p, each with multiplicity 2. 

Proof. This corollary follows immediately from Proposition |6] Lemma|3] and the fact that 
y2 _ ^3 _ _|_ 2a; is a quadratic twist of = + Ax^ + 2x by —1, i.e. it is isomorphic 

to -y2 ^ 2,3 _|_42,2 _|_ overQ(i). □ 

3.3. The number field Q(6', i). Let 9 = 2^/4(72 - if/^. In the previous section, we 
have seen that the two hyperelliptic curves — x^ + x and y'^ ~ x^ ^ Ax^ + lOx'' — 
20^2 — 16a; — 8 are isomorphic over Q(6'). As in the case of Theorem lAl the field Q(0) 
is not an abelian extension of Q, so in order to apply Lemma |2] we change the base field 
from Q to ^(Cs), where Cs e2''*/8 so that Q(6', Cs) is Galois over Q(C8)- From now on, 
we let 

i^ = Q(C8), L = Q{exR) = m.^)- 



Lemma 8. The field L = Q{d,i) is a Kummer extension of K = Q(C8) obtained by 
adjoining the fourth root of i[\/2 — 1) to Q(C8)- The field extension L/ K is unramified 
outside of the place 1 — ^g. 

Proof We have (1 - Cs)'' = 2(\/2 - ifi. Thus, {6 /{I - = ((^2 - and 

Q(6l, i) = (^{^i{^/2 - 1), Cs)- Now i(V2 - 1) is a unit in Z[C8]. Hence, the only place 
at which L/ K can possibly be ramified is the prime 1 — Cs lying over 2. This proves the 
lemma. □ 

The main purpose of this section is to determine the characters of Ga\{<[^/ K) associated 
to the abelian extension L/K. From now on, we set 



77= Vz(V2-l). 

(Since L/K ha Kummer extension, it does not matter which fourth root of i(\/2 — 1) we 
take.) The Galois group of L over K is cyclic and generated by 



a : rj ^ irj. 



For each prime ideal p of Q(Cs) relatively prime to 1 — Cs. the Artin symbol ^ j is 
defined as the unique Galois element such that 

(5) (7^ (77) = ?7^"(P) mod p, 

where Nm{p) denotes the norm of p. Then the characters associated to the field extension 
L/K are defined by 

(6) Xk{p)^i'\ fc = 0,...,3, 
where j is the integer in (|5]). 

Lemma 9. Let fc = 1, 2, 3. 



g 
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(1) IfpisaprwieofQ{(^s) lying over a prime p congruent to 3 modulo 8, thenxk{p) = 
I or I . 

(2) Ifp is a prime of fying over a prime p congruent to 5 or 7 modulo 8, then 
Xkip) = I for all k. 

Proof. A prime p lying over a prime p congruent to 3, 5, or 7 modulo 8 has norm p^. In 
the case p= 3 mod 8, notice that 

{V2 - = i~V2 - 1){V2 -!) = -! mod p, 

which implies that 

{V2~iYp^~^^^^ = -Imodp. 

It follows that 

^Nmip)-l ^ ( _ l))(p^-l)/4 = ±, ^^od P, 

andxfe(p) = ±i''- 

If p = 5 mod 8, a similar argument shows that 

{V2 - ^ ((V2 - ^"^''^^^ = ^ -1 mod p 

and 

^JV™(p)-l ^ l))(p^-l)/4 ^ ^ 

which implies Xfe(p) = 1 for all fc = 0, . . . , 3. 

If p = 7 mod 8, we have \/2 = u mod p for some u e Z. Then 

(V2 - ^ ((u _ ^ 1 j^od p 

and 

^Nm{p)-i ^ (^(^2 - = 1 mod p. 

Again, this gives us Xk{p) = 1 for all k. This proves the lemma. □ 
3.4. Proof of Theorein[TJ We now prove Theorem[T] As before, we let 

where 9 = 2^/^{V2 - l)^/*. For a given number field F, denote Gal(Q/i^) by Gf for 
convenience. 

The cases p = 1 mod 8 can be proved in a similar way as Theorem |A] For instance, 
one can utilize Theorem 6.2.3 of ||T| to conclude that 

provided that p is a prime congruent to 1 modulo 8, n is a quadratic nonresidue modulo 
p, and a and b are integers such that p — + 2b^. Then from Corollary H] we get the 
claimed identity. Alternatively, one can also follow the argument in Section |2] to get the 
same conclusion. We shall not give details here. 

Now consider the two hyperelliptic curves Xi : y'^ — + x and X2 : y'^ ~ + Ax^ + 
Wx'^ - 20a;^ - 16a; - 8. Assume that the p-factors of the L-functions of Xi/Q and X2/Q 
are 

1 1 

(l-ap,ip-^)...(l-ap,4p-^)' (l-/3p,ip-^)...(l-/3p,4p-^)' 
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respectively. Then for p ^ 1 mod 8, the p-factors of the L-functions of Xi/K and X2/K 
are 

1 1 

(l-a2ip-2s)2...(l_^2^^p-2.)2' (l-/32,p-2.)2...(l_^2^^p-2s)2' 

respectively. 

Counting the numbers of points on X2{¥^-n), we find that the 3-factorof L(X2/Q, s) is 
(1 + 4 • 3"" + 8 • 3^2" + 12 • 3"^" + 9 • i^^'Y^ , 

which implies that 

/33,, = C8(l + X/^), Cl(l + Cl(l - Cj(l - 

and 

(7) /Jg',, = ±i[l + ^/^)^ ±i(l - ^f. 
On the other hand, from Corollary |7] we know that 

(8) alj^{l±^/^)\ 

each with multiplicity 2. 

From the above data, we proceed to determine the structure of the semisimplification of 
Px^.Agk from pjci.^Igk and consider them as representations over Q^. By the discussion 
in Section[321 we know px^.e = PEt,i ® PE2,i where peiAgk - PE2Agk- As V-2 e 
K, PEiAgk cr ® (t for some one-dimensional representation a of Gk and its complex 
conjugate. Moreover, the restriction ulci of a to Gl is not isomorphic to &\gl- Since 
PXi.^Igi. = PX2AG1,, we know 

Let (pxi,£|gk)*'' be the semisimplification of pxi.^Igk- Since Ga\{L/K) = Z/4Z, by 
Lemma|2l each Gk irreducible component of {pxiAgkY'^ is either isomorphic to cr or tr 
up to at most a character of Gk whose kernel contains Gl- Thus we may write 

{PXuAgkY' = (ct(8)0i)® (f7(8)02)® (5-«)03)® (5-«)04), 

for some characters (f)i of Gk- Combined with the above data at p = 3, we conclude that 
0j has order 4, 03 = (t>i, and (j>2 — 4'4- Without loss of generality we may assume 

(9) q^^xi, r' = x3, 

where XiiXs arc defined in (|6]l. In summary 

ipx^AGKy' = (c^ ® Xi) ® (o- ® xs) ® «) xi) ® «) xa)- 

Now we turn our attention to general primes p that are congruent to 3 modulo 8. For 
such a prime p, we have p ^ + 2bp for some integers Op and bp. From Corollary|7] we 
know that 

each with multiplicity 2. Then by Lemma |9] regardless of which p lying over p, we have 
Xk{p) = Thus, /3p J, is equal to one of the numbers 

±i(ap ± 6p\/— 2)^, 

and consequently, /3p,fcp is one of 

C8™(ap±6py=2), m = l,3,5,7. 
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Because f3p^k, k = 1 , . . . , 4, ai-e Galois conjugates over Q, we conclude that the p-factor of 
L{X2/Q, s) is equal to one of 

1 

1 ± ibpp-'' + Sb^p-^'' ± 46ppi-3^ + p2-4s • 
In other words, we have 

#X2i¥p)=p+l±Abp. 
On the other hand, because the polynomial + Ax^ + lOx* — iQx^ — IQx — 8 has an even 
degree and its leading coefficient is a square, we have 

„ , „ ^ /a;*^ + _^ iQ^i _ 20x2 - 16a: - 



x=0 



Therefore, 

p-1 



/ X -t- Ax^ + lOa;"* - 20x^ - 16a: „ , 
1 + 2^ I 1 = ±46, 

x=0 



P 

Together with Lenima|3] this yields our main theorem. 
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